What's new

1. August 2026safeweave-mcp 0.7.0
   • –New: npx -y safeweave-mcp scan [dir] — run the same scanners from the terminal or CI, then exit. Formats: --format json|sarif|text; gate with --fail-on critical|high|medium (or --no-fail).
   • –SARIF output for GitHub code scanning, plus a GitHub Action that wraps the CLI.
   • –Argv is parsed before the TTY/MCP branch, so CI (non-TTY) runs the scan instead of starting the MCP server.
2. August 2026safeweave-mcp 0.6.x
   • –Cloud findings in your editor: get_cloud_findings, get_fix_context, fix_vulnerability, trigger_cloud_scan, and list_resources — 17 MCP tools total (plan-dependent).
   • –get_fix_context returns the vulnerable code with surrounding context so your AI can edit the file directly.
   • –Confidence scoring downgrades likely-noise findings (test files, examples) and prioritizes secrets and injection.
   • –README: corrected the free-trial wording (10 scans, no signup, then register) and the Cloud price ($20/mo).
3. August 2026Cloud
   • –Cloud scanning: connect a GitHub repo and every push and pull request is scanned by a managed runner.
   • –Results post back as a GitHub Check Run with inline annotations on the exact file and line.
   • –New dashboard pages: Integrations (connect GitHub), Repositories (connect + browse), and a per-repo security profile with vulnerability lifecycle (new / recurring / resolved / reopened).
   • –Per-repo shareable security score with a public score page.
4. EarlierScanners
   • –Eight scanners: SAST (Semgrep/Opengrep), secrets (Gitleaks), and dependencies free and local; IaC (Trivy), container (Trivy), DAST (Nuclei), license, and posture on Self-Hosted Pro.
   • –Scanner binaries download automatically on first run — no manual install.
   • –npx-first setup: run npx -y safeweave-mcp and get 10 free scans with no account.

The local-tier CLI (npx -y safeweave-mcp scan) and its GitHub Action shipped in 0.7.0.